As long as the attacks were logged another provider (like their
upstream provider for example) can come along and say "we traced the
attack to your network, what sort of traps were logged". If they are
totally clueless they can at least set up the traps and traplogs
(possibly with some help) at that point and get the next attack.
Curtis